Heroku Security Bug Bounty

Re:Heroku Security Bug Bounty by oijaf888 on Thursday April 17, 2014 @03:32PM (#7605791)

I wonder why they chose BugCrowd over the seemingly significantly cheaper HackerOne?

[ Parent | on HN ]

Re:Heroku Security Bug Bounty by infosectosser on Thursday April 17, 2014 @04:35PM (#7606136)

I would guess it is precisely because BugCrowd is more expensive. They offer a managed program where BugCrowd's employees validate bug reports for participating companies. Speaking from experience, that process can become very time-consuming.

[ Parent | on HN ]

Re:Heroku Security Bug Bounty by EricDeb on Thursday April 17, 2014 @07:53PM (#7607258)

If I were running a startup or even a moderately-sized company, implementing and managing a bug bounty program internally sounds like a headache, and probably would be put off indefinitely. A managed solution like BugCrowd could definitely fill this void.

[ Parent | on HN ]